OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Article - A solution to phishing

From: Joseph Miller (josephtidetamerboatlifts.com)
Date: Mon Nov 29 2004 - 07:50:59 CST


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Why not use an opt-in system where a USB device contains a person's private
key which is used to authenticate to a website? They device is a complete
encryption solution so that the key is never transferred to a computer, but
the website challenges the browser, which challenges the device, which uses
public key encryption to reply. Such a device could also be used to contain
personal information such as name, address, etc. so that automatic
form-fillers in web browsers could be more effective and useful especially
for roaming users.

- -Joseph Miller
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBqylGmXZROF+EADURAsZNAJ992In6VinjzflweTLxy4Un+VUAxwCfZOK+
9PJUGeOY01ZtOBdjlsKbU+E=
=/l+Z
-----END PGP SIGNATURE-----